IN THE CLAIMS 

Please amend the claims as follows: 

1. (currently amended) A method for processing commimication traffic, said method 
comprising: 

detecting an anomaly in communication traffic within a communication network; 

in response to a detection of an anomaly occurred in said communication traffic, 
applying a blocking measure A, a blocking measure A & B, and a blocking measure A 
& !B to said communication traffic for stopping said anomaly; 

determining whether or not said anomaly reoccurs after said blocking measure A 
& B has been temporarily removed; 

in response to a determination that said anomaly does not reoccur, canceling said 
block measure A & B from being applied to said communication traffic and enforcing 
said blocking measure A & !B on said communication traffic; aiid 

in response to a determination that said anomaly reoccurs, reimposing said 
blocking measure A & B on said communication traffic and temporarily removing said 

blocking measure A & !B firom said communication traffic; 

determining whether or not said anomaly reoccurs after said blocking measure A 
& !B had been temporarily removed: 

in response to a determination that said anomaly does not reoccur, canceling said 
block measure A & !B firom being applied to said communication traffic and enforcing 
said blocking measure A & B on said communication traffic: and 
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in response to a determination that said anomaly reoccurs, reimposing said block 
measure A on said communication traffic . 

2. canceled 

3. (previously presented) The method of Claim 1, wherein said blocking measure A & !B 
is a less restrictive blocking measure than said blocking measure A & B. 

4. (previously presented) The method of Claim 1, wherein said detecting further includes 
detecting a pattem in a value of at least one protocol field associated with said communication 
traffic. 

5. (previously presented) The method of Claim 1, wherein said detecting further includes 
detecting whether or not a flow rate of said anomalous traffic has exceeded a predetermined 
threshold. 

6-32. canceled. 
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